The OSHA Bloodborne Pathogens Standard (29 CFR 1910.1030) has governed infection prevention in dental and medical offices for decades, but one of the most commonly cited deficiencies isn't the absence of a plan — it's an outdated one. Practices often write an exposure control plan once at startup and never revisit it, which puts them out of compliance even if their clinical infection control is excellent.
What the Exposure Control Plan Must Cover
A written exposure control plan must identify job classifications and tasks with exposure, assign responsibilities, and describe controls, PPE, housekeeping, and post-exposure procedures. Provisions include exposure control plans, engineering and work practice controls, hepatitis B vaccination, hazard communication and training, and recordkeeping. For a dental setting, this means the plan should be specific to your actual procedures and equipment — not a generic template pulled from another practice type.
Annual Review Isn't Optional
Employers are required to review and update the exposure control plan at least annually and whenever necessary to reflect new or modified tasks and procedures which affect occupational exposure. This review should also capture new hires, new devices, and any exposure incidents that reveal a gap. Triggers for an update include new job classifications involving occupational exposure, new technologies or engineering controls such as needleless systems or sharps safety devices, new tasks or procedures, an exposure incident that reveals gaps in the current plan, and changes in applicable regulations. A plan that hasn't been touched in several years, regardless of your safety record, does not satisfy the standard.
The Sharps Injury Log Requirement
The Needlestick Safety and Prevention Act added specific recordkeeping obligations to the Bloodborne Pathogens Standard. Employers who have employees who are occupationally exposed to blood or other potentially infectious materials, and who are required to maintain a log of occupational injuries and illnesses under existing recordkeeping rules, must also maintain a sharps injury log. Entries must document the device involved and how the injury occurred while protecting employee confidentiality. This log is reviewed as part of the annual program evaluation and maintained for at least five years following the end of the calendar year covered.
Not every practice is required to keep one federally. Workplaces with 10 or fewer employees are exempt from OSHA recordkeeping requirements and are also exempt from recording and maintaining a Sharps Injury Log. However, this exemption is not universal — under Cal/OSHA's Bloodborne Pathogens Standard, any employer with occupational exposure to blood or other potentially infectious materials must establish and maintain a Sharps Injury Log, and this requirement applies even if the practice would otherwise be exempt from federal OSHA's 300-series recordkeeping due to size or industry. Washington has similar state-specific rules, so practices should confirm their obligations under their own state plan rather than assuming federal exemptions apply.
Document Employee Input on Safety Devices
A frequently missed element is employee participation in device selection. Employers are required to document, in the Exposure Control Plan, how they received input from employees, which can be met by listing the employees involved and describing the process by which input was requested, or presenting other documentation such as meeting minutes or records of responses received. This documentation should be refreshed alongside your annual review, not treated as a one-time task.
A Simple Annual Compliance Checklist
- Review and date-stamp the exposure control plan, noting what changed since the last version
- Confirm hepatitis B vaccination records are current for all exposed staff
- Evaluate any new safety-engineered sharps devices on the market and document the review
- Solicit and record non-managerial staff input on device selection
- Reconcile the sharps injury log (if required) and check state-specific rules beyond federal exemptions
- File updated training records tied to the plan's revision date
Treating the exposure control plan as a living document — reviewed on a fixed schedule and updated whenever workflows change — is the most reliable way to stay ahead of both OSHA inspections and preventable sharps injuries.